Comments on: Researcher: Web 2.0 vulnerable to cookie theft

Robert Graham of Errata demonstrates a way to steal Web 2.0 session cookies, and how to find zero-day vulnerabilities inside security applications.

[n3td3v]

Is this the end of HTTP?

The actual story isn't about stealing cookies, which has been able to do for a long time, and to be honest it doesn't matter how you get the cookie, the bottom line is, no one should be using HTTP anymore.

[The_Decider]

Then what should we be using using?

All or close enough to all web pages use and will continue to use HTTP for the foreseeable future.

What protocol is poised to take over?

[kieranmullen]

Not the end of httpd moron

Everything doesn't need to be encrypted. Not every site uses cookies. Besides even with ssl accelerators they system would slow down.